You can use the UserAccountControl property of an Active Directory user object to enable and disable all kinds of neat functionality: https://support.microsoft.com/en-ca/kb/305144. One of the things you can enable is for a user to have no password (bit in the 32 position).

While this only impacts users who connect to the console, and it doesn’t mean that a user doesn’t have a password (just that they might), it’s pretty bad to leave that enabled for any users you’ve got.

Just moved in

I just moved my blog from one hosting provider to another. If you see a broken image or some other weirdness, I’d love if you let me know by email at thmsrynr@outlook.com or hit me up on Twitter @MrThomasRayner.